IPDebrief

102.140.217.238

IP Intelligence Dossier
Your IP: 216.73.217.131
{ } JSON 🔧 Full Actions API
🤖 Witness AIThis summary was generated by AI and may contain inaccuracies. Verify critical details independently.

# IP Intelligence Briefing: 102.140.217.238/32

Classification: Low Risk | Risk Score: 25/100

Date: 2026-07-28 | Analyst: IPDebrief Intelligence

---

## Executive Summary

IP 102.140.217.238 is a low-risk address associated with Wananchi Group (Kenya) Limited, a legitimate telecommunications infrastructure provider. The IP operates within the 102.140.217.0/24 subnet in Nairobi, Kenya (ASN 15399). No active threat indicators, known attacker signatures, or malicious campaign associations were identified. The subnet demonstrates clean classification with zero abuse density.

---

## Technical Profile

Geolocation: Nairobi County, Kenya (KE)

Coordinates: 36.82°E, 1.28°S | Timezone: Africa/Nairobi

ASN: 15399 | Organization: Wananchi Group (Kenya) Limited

BGP Prefix: 102.140.217.0/24

Route Stability: Unstable (route changes observed)

Network Services:

DNS Configuration:

---

## Threat Assessment

IndicatorStatus
Blacklist Count0
Known AttackerNo
Tor Exit NodeNo
Spam SourceNo
Active AttackerNo
Honeypot Hits0
WAF Violations0

Abuse Confidence Score: Not applicable

Campaign Likelihood: Not detected

---

## Neighborhood Analysis

Subnet: 102.140.217.0/24

Classification: Clean

Abuse Density: 0.0

Total Siblings: 2

Active Siblings: 1

Neighbor Profile: 102.140.217.57

The subnet demonstrates minimal abuse activity with no threat siblings identified.

---

## Historical Observation Timeline

Nine signal observations recorded through July 28, 2026:

1. DNSSEC Validation: Confirmed valid RRSIG absence (confidence: 0.90)

2. ASN Assignment: Wananchi Group (Kenya) Limited, allocated 2018-06-20 (confidence: 0.85)

3. PTR Record Status: No reverse DNS entry (confidence: 0.90)

4. Blacklist Activity: 1 of 8 blacklist listings observed, maximum severity "high" (confidence: 0.85)

5. Operator Score: 0 (confidence: 0.30)

Temporal Indicators:

---

## Relationship Graph

No relationships identified in the relationship graph for this IP address. No associations to hostnames, organizations, certificates, or related subnets were detected.

---

## Recommended Actions

Current Risk Posture: Low Risk (Score 25)

Recommended Firewall Rules: None required based on current risk profile

Monitoring Status: Standard monitoring recommended

Decision Matrix:

---

## Intelligence Conclusions

IP 102.140.217.238 represents legitimate telecommunications infrastructure owned by Wananchi Group (Kenya) Limited. The address shows no malicious activity indicators and no association with known threat actors or campaigns. The subnet (102.140.217.0/24) maintains clean classification with low abuse density. No immediate defensive actions are warranted.

Threat Level: LOW

Action Required: NONE — Continue standard monitoring practices

---

*Report generated: 2026-07-28 | Data Source: IPDebrief Intelligence Platform*

This summary was generated by AI and may contain inaccuracies. Verify critical details independently.

🌍 Geolocation

Country🇰🇪 Kenya
RegionNairobi County
CityNairobi
TimezoneAfrica/Nairobi
Latitude-1.28
Longitude36.82

🏢 Ownership & Registration

OrganizationWGK LIR
ASNAS15399
Network Name102.140.217.0 - 102.140.217.255
CIDR Block102.140.217.0/24
RIRAFRINIC
CountryKE
Abuse Contact—

🌐 DNS Intelligence

PTR RecordNo PTR
Forward ConfirmedNo — PTR hostname does not resolve back to this IP (weak signal)

🔐 DNS Hygiene

Hygiene Score20% (Poor)
SPFNot configured
DMARCNot configured
FCrDNSNot verified
DNSSECValid
CAANot configured

☁️ Network Classification

InfrastructureUnknown
Service PurposeFirewalled / No Services
Network TierUnknown — Insufficient routing data to classify
No specific classification

🔌 Services & Open Ports

PortServiceProtocolBanner
No open ports detected
Closed Ports22, 25, 80, 443, 3389, 8080, 8443 (0 open / 7 scanned)
Server—
HTTP Title—

🔐 TLS Certificate

🔒
No certificate
Issued by —
N/A
SANsNone
Valid From—
Valid Until—

🛡️ Public Network Snapshot

Origin ASNAS15399
Network Prefix102.140.217.0/24
Route mappingFound

🎯 Confidence Breakdown

Per-dimension confidence scores based on source diversity and data freshness

DimensionScoreSourcesObservations
threat
21%
24
routing
8%
11
services
12%
22
ownership
12%
22
reputation
8%
12
geolocation
12%
22
Overall12%1013
Coverage: 3/6 dimensions · Data sufficiency: partial
Data CoherenceConsistent (100%)
AttributionModerate (50%)
OwnershipFCrDNSGeo ConsensusGeo PlausibleIRR MatchRPKI Valid

📅 Observation Timeline 🔄 Live

First Seen2026-07-17 23:20:45 UTC
Last Seen2026-09-03 03:55:38 UTC
Profile Built2026-09-03 03:59:50 UTC
Data FreshnessLive
Signal Types16
Total Observations22
🔍 16 signal types · 22 observations collected
This report is generated from 16+ independent intelligence signals including ownership records, DNS analysis, BGP routing, TLS certificates, port scanning, threat feeds, behavioral fingerprinting, and more.
Full dossier details are available via our API.
{ } JSON API 🔧 Actions API 📧 Enterprise Access

❓ Frequently Asked Questions About 102.140.217.238

Who owns the IP address 102.140.217.238?

102.140.217.238 is registered to WGK LIR. The address falls within the 102.140.217.0/24 network block. Registration is held at AFRINIC.

Where is 102.140.217.238 located?

Geolocation data places 102.140.217.238 in Nairobi, Nairobi County, Kenya. The local time zone is Africa/Nairobi. IP geolocation is approximate and indicates the network's registered or routed location rather than a precise physical address.

Is 102.140.217.238 malicious or safe?

102.140.217.238 currently carries a low risk assessment, meaning no significant threat indicators have been observed. This assessment is generated from continuously collected signals and can change over time.

🏘️ Related IP Addresses

Nearby addresses in 102.140.217.0/24

Browse related networks

ℹ️ About This Report

All data shown is publicly available network metadata — IP addresses do not reliably identify individuals. Assessments are probabilistic and should not be used as sole basis for access control decisions. To report an issue or request data review, contact admin@ipdebrief.com.